Privacy policy
Last updated October 26, 2026.
GoRest is a free, public REST API for testing and prototyping. This page describes what we do with information you give us when signing in or interacting with the service. Plain English, no dark patterns.
What we collect
You log in through Silicon Circuits Identity (accounts.siliconcircuits.com) with Google, a personal Microsoft account or GitHub. We receive your account ID and email. We do not see your password. Facebook logins and Microsoft work or school accounts are no longer offered. If you create access tokens, we store only a SHA-256 hash of each token. The token itself is shown to you once, when you create it, and we cannot show it again. If you open a Q&A question or email us, we keep what you send.
Why we collect it
Email lets us recognise you on return visits and notify you about important changes. Access tokens authenticate API requests and apply per-token rate limits. If you email us, we use your message and address to reply to you.
What we do not do
We do not sell, rent or trade your personal information. We do not market to children under 13. We do not show advertising.
Cookies and browser storage
GoRest sets no cookies of its own. While you are logged in, your login is kept in the page's memory only; it is gone when you close the tab. Your browser's local storage remembers two choices: light or dark theme, and your answer to the analytics banner.
We measure page visits with Google Analytics 4. It loads only after you accept the banner; if you do not accept, nothing is loaded from Google. When it loads, Google sets its own cookies. We no longer keep our own record of page visits. For how Google uses this data, see https://policies.google.com/technologies/partner-sites.
Turning cookies off
You can block cookies in your browser. GoRest keeps working; Google Analytics then cannot count your visit.
Account deletion
Delete your account from your account page. This removes your GoRest account and its access tokens, and cannot be undone. Your Silicon Circuits login itself is not deleted; you can manage it at accounts.siliconcircuits.com.
Third parties
We use Silicon Circuits Identity (login), Google Analytics 4 (page visits, only after you accept the banner) and Postgres to operate this service. We do not share data with parties outside the necessary hosting infrastructure and these services.
Compliance
We honour the California Online Privacy Protection Act (CalOPPA) and the Children's Online Privacy Protection Act (COPPA). California residents may request a copy of their data by email to zeevy@outlook.in.
Your rights under India's Digital Personal Data Protection Act, 2023
Under the Digital Personal Data Protection Act, 2023 you have these rights over your personal data:
- Access: ask for a summary of the personal data we hold about you and how we use it.
- Correction: ask us to correct or complete data that is wrong or incomplete.
- Erasure: ask us to delete your data. You can also delete your account yourself from your account page.
- Grievance: raise a complaint with us about how we handle your data. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.
- Nominate: name another person to use these rights for you if you die or cannot act yourself.
To use any of these rights, email zeevy@outlook.in from the address on your account.
Contact
Privacy questions, deletion requests outside the app, or anything you would rather discuss directly: email zeevy@outlook.in.